Securing Bitcoin wallets via a new DSA/ECDSA threshold signature scheme
نویسندگان
چکیده
The Bitcoin ecosystem has suffered frequent thefts and losses affecting both businesses and individuals. Due to the irreversibility, automation, and pseudonymity of transactions, Bitcoin currently lacks support for the sophisticated internal control systems deployed by modern businesses to deter fraud. To address this problem, we present the first threshold signature scheme compatible with Bitcoin’s ECDSA signatures and show how distributed Bitcoin wallets can be built using this primitive. For businesses, we show how our distributed wallets can be used to systematically eliminate single points of failure at every stage of the flow of bitcoins through the system. For individuals, we design, implement, and evaluate a two-factor secure Bitcoin wallet.
منابع مشابه
Threshold-Optimal DSA/ECDSA Signatures and an Application to Bitcoin Wallet Security
While threshold signature schemes have been presented before, there has never been an optimal threshold signature algorithm for DSA. Due to the properties of DSA, it is far more difficult to create a threshold scheme for it than for other signature algorithms. In this paper, we present a breakthrough scheme that provides a threshold DSA algorithm that is efficient and optimal. We also present a...
متن کاملSecuring Bitcoin wallets via threshold signatures
The Bitcoin ecosystem has suffered frequent thefts and losses affecting both businesses and individuals. The insider threat faced by a business is particularly serious. Due to the irreversibility, automation, and pseudonymity of transactions, Bitcoin currently lacks support for the sophisticated internal control systems deployed by modern businesses to deter fraud. We seek to bridge this gap. W...
متن کاملUsing Level-1 Homomorphic Encryption To Improve Threshold DSA Signatures For Bitcoin Wallet Security
Recently Gennaro et al. (ACNS ’16) presented a thresholdoptimal signature algorithm for DSA. Threshold-optimality means that if security is set so that it is required to have t + 1 servers to cooperate to sign, then it is sufficient to have n = t + 1 honest servers in the network. Obviously threshold optimality compromises robustness since if n = t+ 1, a single corrupted player can prevent the ...
متن کاملHow Perfect Offline Wallets Can Still Leak Bitcoin Private Keys
ECDSA has become a popular choice as lightweight alternative to RSA and classic DL based signature algorithms in recent years. As standardized, the signature produced by ECDSA for a pair of a message and a key is not deterministic. This work shows how this non-deterministic choice can be exploited by an attacker to leak private information through the signature without any side channels, an att...
متن کاملFast Secure Two-Party ECDSA Signing
ECDSA is a standard digital signature schemes that is widely used in TLS, Bitcoin and elsewhere. Unlike other schemes like RSA, Schnorr signatures and more, it is particularly hard to construct efficient threshold signature protocols for ECDSA (and DSA). As a result, the best-known protocols today for secure distributed ECDSA require running heavy zero-knowledge proofs and computing many large-...
متن کامل